General
-
Target
5da3e6b4bea1eaceddb048a4a6bd702291189f42d15c4b2670de78984329b0a9
-
Size
59KB
-
Sample
220124-atr97sggam
-
MD5
3d57934b0143b09e82092896580f90b0
-
SHA1
ecfb2a7f8b9cc9878a447c6733b01276c13c5c6b
-
SHA256
5da3e6b4bea1eaceddb048a4a6bd702291189f42d15c4b2670de78984329b0a9
-
SHA512
0cfdb2c274b11697c875ccbf1943cb5cdee488018eada30408d7f7efc63d6d7df4e954e7239e71de8f8b082b7e9126255524e941e6620eeadf03b7c412b16882
Static task
static1
Behavioral task
behavioral1
Sample
5da3e6b4bea1eaceddb048a4a6bd702291189f42d15c4b2670de78984329b0a9.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
5da3e6b4bea1eaceddb048a4a6bd702291189f42d15c4b2670de78984329b0a9.exe
Resource
win10-en-20211208
Malware Config
Extracted
C:\\README.27a6f0b5.TXT
darkside
http://darksidfqzcuhtk2.onion/VGBU8VAXXW7EYB5U4KQJXUGU5NT5FP8208W6UXVSKQDAE3CNBR4JTZQCXEZFZWF2
Targets
-
-
Target
5da3e6b4bea1eaceddb048a4a6bd702291189f42d15c4b2670de78984329b0a9
-
Size
59KB
-
MD5
3d57934b0143b09e82092896580f90b0
-
SHA1
ecfb2a7f8b9cc9878a447c6733b01276c13c5c6b
-
SHA256
5da3e6b4bea1eaceddb048a4a6bd702291189f42d15c4b2670de78984329b0a9
-
SHA512
0cfdb2c274b11697c875ccbf1943cb5cdee488018eada30408d7f7efc63d6d7df4e954e7239e71de8f8b082b7e9126255524e941e6620eeadf03b7c412b16882
Score10/10-
DarkSide
Targeted ransomware first seen in August 2020. Operators steal data to use as leverage.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Sets desktop wallpaper using registry
-